CVE-2024-5623: Untrusted search path vulnerability in B&R APROL
Published Aug 29, 2024
·Updated
An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.
Affected Software
1 affected component
Br-automation Industrial Automation Aprol<=r4.4-00p3
Event History
Aug 29, 2024
CVE Published
via MITRE·08:51 AM
Data Sourced
via MITRE·08:51 AM
DescriptionWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-5623?
CVE-2024-5623 has a moderate severity rating due to its potential for an authenticated local attacker to execute arbitrary code.
2
How do I fix CVE-2024-5623?
To fix CVE-2024-5623, upgrade to a version of B&R APROL beyond R 4.4-00P3.
3
Who is affected by CVE-2024-5623?
The vulnerability CVE-2024-5623 affects users of B&R APROL version R 4.4-00P3 and earlier.
4
What exploit methods are associated with CVE-2024-5623?
CVE-2024-5623 can be exploited by an authenticated local attacker leveraging an untrusted search path to execute arbitrary code.
5
Is CVE-2024-5623 a remote or local vulnerability?
CVE-2024-5623 is a local vulnerability, requiring authenticated access to the affected system.